]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commit
linux/generate-cve-exclusions: use data from CVEProject
authorDaniel Turull <daniel.turull@ericsson.com>
Thu, 10 Apr 2025 09:48:35 +0000 (11:48 +0200)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Thu, 17 Apr 2025 09:22:52 +0000 (10:22 +0100)
commit12612e8680798bdce39fbb79885e661596dbd53c
tree76eaa02ecdf5d22913f3c7a118e706e910f1c075
parent0469af3bd8e3c721ba9c6f96d786c95a1726368b
linux/generate-cve-exclusions: use data from CVEProject

The old script was relying on linuxkernelcves.com that was archived in
May 2024 when kernel.org became a CNA.

The new script reads CVE json files from the datadir that can be either
from the official kernel.org CNA [1] or CVEProject [2]

[1] https://git.kernel.org/pub/scm/linux/security/vulns.git
[2] https://github.com/CVEProject/cvelistV5

Signed-off-by: Daniel Turull <daniel.turull@ericsson.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-kernel/linux/generate-cve-exclusions.py